Privacy Policy

Last updated: October 27, 2026

This policy explains what data Calmretry collects, why, and how we protect it. Calmretry is provided by Slow Software, an independent software studio operated by El Mehdi Ayad in Morocco ("we", "us"). We try to collect as little as possible.

1. Two kinds of data

Your account data. When you sign up or join the early access list, we collect your name, email address and basic account settings. For this data, we decide how it's used.

Your customers' billing data. When you connect your billing account, we process data about your customers on your behalf so we can recover failed payments. For this data, you are in control and we act as your processor: we only use it to provide the Service to you, following your instructions.

2. Billing data we process for you

With the access you grant (a restricted, read-only key), Calmretry reads:

• customer names and email addresses;
• subscriptions, invoices, charges and payment status, including amounts, dates and decline reasons;
• basic payment method details: card brand, last four digits and expiry date.

We never receive or store full card numbers or security codes. When a customer updates their card, they do so on your payment provider's own secure, hosted page, not on Calmretry.

We use this data only to detect failed or at-risk payments, send recovery and card-expiry emails to your customers on your behalf, stop those emails once a payment is resolved, and show you reports of what was recovered. We don't sell it, use it for advertising, or contact your customers for any other reason.

3. Customer emails

Recovery emails are sent in your name to the email address your customer gave you, with replies going to you. We keep a record of emails sent and their outcome (for example, delivered, bounced, or invoice later paid) so we can avoid duplicate emails and show you results. We don't put tracking pixels in these emails by default.

4. Payments for Calmretry itself

When you buy a Calmretry plan, the payment is handled by Lemon Squeezy, our merchant of record. Lemon Squeezy collects your payment details and billing address and processes them under its own privacy policy. We receive order details such as your name, email, plan, and payment status, but not your full card details.

5. Website

This website doesn't use advertising or tracking cookies. Our hosting provider may process basic technical data, such as IP addresses and request logs, to deliver the site and protect it from abuse.

6. Service providers

We use a small number of trusted providers to run Calmretry, such as Cloudflare (website hosting and security), Lemon Squeezy (payments), and providers for application hosting, database storage and email delivery. They process data only to provide their services to us and are bound by appropriate confidentiality and data protection terms. A current list is available on request.

7. Security

Data is encrypted in transit. Access keys you give us are encrypted at rest and access is restricted. Calmretry asks only for read-only access and cannot move money or change your billing account.

8. Retention and deletion

• When you disconnect your billing account, we delete the access key immediately and delete the billing data we copied from it within 30 days.
• When you close your account, we delete your account data within 30 days, except records we must keep for legal, tax or accounting reasons.
• You can export a record of emails sent and outcomes at any time from your settings.

9. International transfers

We're based in Morocco, and our providers may process data in other countries, including the European Union and the United States. Where required, we rely on appropriate safeguards for these transfers.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to how it's used. Email us to make a request. If you're one of our customers' customers, please contact the business you subscribe to first; we'll help them respond. You can also complain to your local data protection authority; in Morocco this is the CNDP.

11. Children

Calmretry is a business tool and is not intended for anyone under 18.

12. Changes

If we change this policy, we'll update the date above, and we'll email account holders about significant changes.

13. Contact

Privacy questions or requests: hello@calmretry.com.